Securing Draytek 2820n for Home Use

elrasho

elrasho

elrasho

Soldato
Joined
12 Jan 2009
Posts
6,500
Picked up a DrayTek2820n and want to configure it so it's secure for home use. I factory reset and set it up for the following:

1. Connected to SuperHub (which is in Modem Mode)
2. Port Forwarding for my PC (RDP), Rasberry Pi (Vnc) and Xbox 360
3. Setup a DynDNS
4. Wireless N setup with WPA2/PSK key

Is there anything else I should do to secure this router as its got a lot more options than my Virgin Super HUB
 
They come fairly well locked down. I certainly can't remember having to change anything.

The 2820 is getting quite old. It'll limit your broadband connection to about 50Mbps.
 
On my Draytek 2820n to allow me to access my PC via RDP I have to use Port Forwarding AND Port Redirection??? It didn't work until I enabled Port Redirection... on other routers Port Forwarding is enough. Is this correct?
 
You should just need to configure 'Nat->Open Ports'. You'd only need Port Redirection if you need to map an external port to a different internal port.

Opening RDP to the world isn't that great an idea.
 
But when I just use NAT>open ports and try to rdp or put the ip address of my Raspberry Pi Web interface it doesn't connect, only when I use port redirection.

EDIT: Must be noob week for me, I had WAN1 selected rather than WAN2, now it wrks :) I've taken off Port Redirection.

As for RDP , I need to port forward otherwise I won't be able to RDP to my PC from Work right?
 
Last edited:
Glad you've got your main issue sorted.

If you want remote access I'd use RDP over a VPN connection, or use something like LogMeIn. I wouldn't take the risk of just leaving an open port forward.
 
My router has an option for VPN is it easy to setup? I've also made my router accessible from the Internet by typing in my DynDNS but I want this to be more secure because all I get is the basic router login page.
 
Last edited:
If you're seeing the router login from the WAN side look at 'System Maintenance'->'Management' and check your settings. Generally there's no reason to be allowing management from the Internet.

The VPN is easy enough to setup, but will depend heavily on what you're using as the VPN client. Is is much easier to use one of the web-based remote access systems.
 
The VPN will work. Depending on your circumstances reconfiguring a works machine (assuming you even have the necessary access rights) to make the connection could land you in hot water.
 
You must log in or register to reply here.
Back
Top Bottom